General Data Protection Regulation (GDPR)

The GDPR regulates how personal data is collected and processed for individuals in the European Economic Zone. Designed to enhance personal data protection, it is the legal bedrock ensuring transparency for data collection, storage, and processing.

Yandex Cloud focuses on the GDPR as a global framework in the area of data protection and privacy. If our customer is subject to the GDPR, we make sure that provision of Yandex Cloud platform is in line with legal needs of the customer. We’re completely committed to privacy, with procedures in place for informing our customers when incidents occur.

Other certificates and standards

ISO

A global system of quality standards developed by the International Organization for Standardization.

PCI

Standards for secure usage of credit cards from the Payment Card Industry Security Standards Council.

Cloud Security Alliance

An international organization promoting IS best practices for cloud services.